Project "Conda-Forge CVE Mapping"
Buyer: Sovereign Tech Agency GmbH
- Published
- 10 September 2026
- Procedure
- Negotiated procedure
- Lots
- 1
- Notice number
- 00624850-2026
- Reference
- 1e9599af-670b-4c56-bb8a-7cceed3a3602
- Official source
- Official source
CPV codes
- 73000000Servicios de investigación y desarrollo y servicios de consultoría conexos
Description
The contract concerns the project "Conda-Forge CVE Mapping" , which covers vulnerability handling and dedicated security maintenance for conda-forge, the largest package repository run by its community in the conda ecosystem. As part of five work packages, the contract covers a machine-readable record of the upstream software from which conda-forge packages are built; an openly licensed dataset of the vulnerabilities affecting those packages; the authority for conda-forge to publish its own vulnerability records; and a funded security function for the package archive and the shared systems that build and publish it. The aim of this service is to give the software supply chain of public research the capacity to identify, disclose and repair the vulnerabilities it distributes.
Official publications
- TED · 00624850-2026 · 10 September 2026
- OJS · 175/2026 · 10 September 2026
Other tenders from Sovereign Tech Agency GmbH
Frequently asked questions
- Who is the buyer of this tender?
- The contracting authority is Sovereign Tech Agency GmbH (European Union).
- How can I bid for public tenders in European Union?
- Bids are submitted through the official procurement portal of European Union. El Vínculo helps you find tenders and analyse their documents; submission always happens at the official source.
Create a free account and receive new tenders from European Union matching your business, every day.